$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer File: g1UYs1QOiaLDmDIT4C_qq3e9pUQ.cer (raw, json) Hash identifier: c8Cn1VRTxtCBTIuvB6VN8MtSnpnSrF2nS9RqXtZB8rE= Subject key identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: DA24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:18:29 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 202.38.176.0/23 IP: 202.127.192.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55844 (0xda24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:18:29 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=835518B3540E89A2C3983213E02FEAAB77BDA544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:89:0f:19:1f:b9:30:f8:9e:96:ca:aa:ed: cd:66:73:50:67:d9:72:58:8d:96:cd:20:0f:4a:46: 70:db:65:fa:00:04:0b:5e:9b:37:ac:c4:f1:b9:fc: fc:36:b4:7d:d9:a1:1f:e4:df:a7:8f:01:c0:7a:a5: 1c:76:ba:2d:c6:84:6d:5b:63:5c:9d:3c:eb:df:59: 7f:41:a6:aa:3f:ef:36:de:0e:33:13:39:30:f8:f1: 19:45:37:8f:f8:63:77:69:fa:0a:1c:e6:0d:39:fb: bc:73:0d:63:9f:8b:2d:70:c5:72:33:8b:0c:27:63: af:46:91:97:5d:cc:ef:8c:ba:d2:53:70:c7:40:9d: a4:ca:16:72:18:00:89:b9:c1:7c:79:04:39:c5:09: 7d:9c:e9:99:84:70:72:d6:17:b8:c1:b7:8b:7c:bf: 3c:e7:c4:b3:98:cd:ed:07:2a:65:d1:32:f2:9f:7f: 8b:9d:66:cf:f1:1a:34:88:92:89:59:b5:db:dd:ed: e6:21:0c:4b:4f:0a:85:e0:f3:fb:58:46:33:2a:fa: 08:1d:5a:96:98:12:64:b8:69:5d:98:1e:e7:14:cb: fc:69:fa:f3:4c:75:e3:6a:cd:0e:19:e6:ea:c5:f5: 17:d8:52:94:1f:f9:9e:71:f0:7c:97:ff:cc:7e:4d: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:55:18:B3:54:0E:89:A2:C3:98:32:13:E0:2F:EA:AB:77:BD:A5:44 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3229/g1UYs1QOiaLDmDIT4C_qq3e9pUQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.38.176.0/23 202.127.192.0/23 Signature Algorithm: sha256WithRSAEncryption a5:db:09:d0:f9:b7:0f:4f:2f:25:82:6b:1a:cb:9b:a5:32:60: a4:e7:f8:c7:fd:7e:5d:43:31:4c:91:a1:d6:5f:c5:2f:b2:e8: ac:bd:6f:ba:0e:ae:ff:00:f4:23:b6:30:a0:69:fb:c1:ac:d2: a7:8b:56:5f:d9:91:51:90:ef:8e:e0:32:40:4e:a3:63:f2:9f: 4a:b7:b0:57:d8:96:29:35:d8:ea:0d:64:63:b5:69:e4:fd:02: 29:f7:59:9b:9d:9d:26:d1:ec:d6:ec:30:f7:ae:2f:fc:1f:37: d1:85:ae:1f:16:0a:c1:10:21:c2:cf:10:0f:50:1d:20:11:33: f9:1b:6d:61:43:77:54:27:f9:b2:f2:57:de:ae:f4:f9:1c:98: 29:a7:83:a4:37:b7:4d:ca:53:e4:b0:6e:b2:8f:62:9d:db:38: 61:60:02:8b:f5:e0:6a:f5:66:5a:3d:29:c2:fd:44:8d:88:05: 9d:4f:66:cc:64:85:b9:1a:53:e5:63:4f:8e:09:c6:a1:8e:e7: 5d:4f:0c:de:39:a1:9b:c2:59:09:a7:2d:4c:9c:57:6c:dc:d7: 9c:64:46:57:db:03:fc:59:e8:50:71:99:52:b2:b3:de:ae:40: 18:45:12:51:1d:d0:32:56:f7:43:b2:cb:33:a5:bb:48:b9:b8: 0f:1c:d1:40 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDANokMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTE4MjlaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDgzNTUxOEIzNTQwRTg5QTJDMzk4MzIxM0UwMkZFQUFCNzdCREE1 NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUYkPGR+5MPielsqq 7c1mc1Bn2XJYjZbNIA9KRnDbZfoABAtemzesxPG5/Pw2tH3ZoR/k36ePAcB6pRx2 ui3GhG1bY1ydPOvfWX9Bpqo/7zbeDjMTOTD48RlFN4/4Y3dp+goc5g05+7xzDWOf iy1wxXIziwwnY69GkZddzO+MutJTcMdAnaTKFnIYAIm5wXx5BDnFCX2c6ZmEcHLW F7jBt4t8vzznxLOYze0HKmXRMvKff4udZs/xGjSIkolZtdvd7eYhDEtPCoXg8/tY RjMq+ggdWpaYEmS4aV2YHucUy/xp+vNMdeNqzQ4Z5urF9RfYUpQf+Z5x8HyX/8x+ TSFLAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQUg1UYs1QOiaLDmDIT4C/qq3e9pUQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy MjkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzIyOS9nMVVZczFRT2lhTERtRElUNENfcXEzZTlwVVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQByiawAwQByn/AMA0GCSqGSIb3 DQEBCwUAA4IBAQCl2wnQ+bcPTy8lgmsay5ulMmCk5/jH/X5dQzFMkaHWX8Uvsuis vW+6Dq7/APQjtjCgafvBrNKni1Zf2ZFRkO+O4DJATqNj8p9Kt7BX2JYpNdjqDWRj tWnk/QIp91mbnZ0m0ezW7DD3ri/8HzfRha4fFgrBECHCzxAPUB0gETP5G21hQ3dU J/my8lfervT5HJgpp4OkN7dNylPksG6yj2Kd2zhhYAKL9eBq9WZaPSnC/USNiAWd T2bMZIW5GlPlY0+OCcahjuddTwzeOaGbwlkJpy1MnFds3NecZEZX2wP8WehQcZlS srPerkAYRRJRHdAyVvdDssszpbtIubgPHNFA -----END CERTIFICATE-----Generated at Wed Aug 13 05:54:15 2025 by rpki-client